Tag
digital-signatures
- Jun 11, 2026 Ed25519 Cofactors, Canonical Encoding, and Strict Verification A twisted Edwards curve with a small cofactor and a single verification equation leaves several checks outside the signature standard, and different libraries have disagreed about them. cryptography
- Feb 12, 2026 The Verification Split: Why a MAC Cannot Settle a Dispute Symmetric tags and public-key signatures differ in who is able to check them, and that single difference determines what each can be used as evidence for. cryptography
- Jan 12, 2026 The Fiat-Shamir with Aborts Loop in ML-DSA How rejection sampling hides the signing nonce, why a signature leaks nothing but a transcript, and what the rejection rate costs in signing throughput. cryptography
- Oct 13, 2025 Salt, Hash, and MGF1: What RSA-PSS Adds to the Verification Step Probabilistic signature padding turns a textbook RSA signature into one that resists chosen-message forgery, and moves work from the signer to the verifier. cryptography
- Jul 15, 2024 ECDSA Nonce Reuse and the Private Key It Leaks A repeated signing nonce turns two signatures into a linear system that yields the private key, and biased nonces are nearly as bad because lattice reduction tolerates noise. cryptography
- May 21, 2023 What an Image Signature Covers and What It Leaves Out How a signature envelope binds a signing key to a payload digest, why the payload is usually not the image, and the payload types that close different parts of the gap. virtualization